v4.29.0

4.29.0 (2026-07-16)

Features

• auth: perms-check persisted token reads in generated config.Load / LoadCredentials (#3596) (63c3dc7)
• generator: add xml response_format for XML-backed APIs (#3065) (cdf7f4c)
• peloton: preserve managed oauth generation (#3609) (3f3c219)

Bug Fixes

• cli: allow credential-free OAuth login probes (#3624) (57ee95a)
• cli: avoid reserved store schema collisions (#3640) (e279ac8)
• cli: continue cursor sync across short pages (#3617) (be192ba)
• cli: dedupe responsePathForResource switch cases (#3530) (5a23446)
• cli: drop dangling ": " from APIError.Error() on empty response body (#3545) (a2f518f), closes #2945
• cli: exit non-zero on missing positional and unknown subcommand (#3633) (06446fc)
• cli: follow generated pagination cursors safely (#3601) (4c9300f)
• cli: gate nested required fields by parent (#3585) (7f7e0c4)
• cli: gate zero-sync data surfaces (#3659) (ecf2493)
• cli: handle HAL pagination envelopes and size page parameters (#3651) (6c57441)
• cli: harden generated local-store behavior (#3658) (81b4570)
• cli: harden generated MCP handlers (#3586) (339fdc6)
• cli: harden generated store file permissions (#3613) (459a867)
• cli: honor explicit quiet for teach JSON output (#3648) (61041c5)
• cli: honor paginated HTML responses (#3627) (3713207)
• cli: honor pp:typed-exit-codes in live dogfood and complete learn-loop annotations (#3556) (19ffc5d)
• cli: improve which ranking and Google Discovery generation (#3476) (800d893)
• cli: keep browser-http ALPN on HTTP/1.1 (#3599) (3623e16)
• cli: normalize brand-named auth env vars (#3595) (91539d1)
• cli: package manifest-selected manuscripts safely (#3582) (16b21f6)
• cli: parse protocol-relative server URLs (#3625) (a4c888d)
• cli: persist OAuth token expiry in generated credentials (#3533) (e73f2f9)
• cli: prefer credential URLs in auth inference (#3641) (2a159c2)
• cli: preserve generated credential aliases (#3603) (facf37a)
• cli: preserve hierarchical path parameter slashes (#3654) (949c807)
• cli: prevent unsafe request retries (#3615) (cf0458a)
• cli: rebuild stale live dogfood binaries (#3579) (7a5b90e)
• cli: redact credential tokens from proof samples (#3580) (3cc7089)
• cli: refresh staged artifacts before promote (#3612) (947b1e9)
• cli: report generated batch failures (#3616) (065aee4)
• cli: require patched Go generator release (#3610) (1f77334)
• cli: scrub generated terminal output (#3614) (f839f1c)
• cli: scrub generated terminal output (#3614) (c732ccc)
• cli: serialize OpenAPI array query params (#3583) (e4389b4)
• cli: support structured binary response output (#3628) (5ed7dfe)
• cli: use authoritative resource paths for data commands (#3661) (2621ebc)
• cli: validate JSON body flag shapes (#3647) (f232a7b)
• cli: verify generated TLS certificates by default (#3605) (18022d9)
• cli: warn on unknown --select fields (#3652) (620ea2f)
• skills: Phase 0 registry lookup uses schema v2 .entries key (#3608) (50521b1)
• skills: preserve runtime version layout on reprints (#3578) (9b81492)